Lieber Helfer,
ich habe wie schon in mehreren Themen hier den Interpol Virus, bei dem man 100€ Strafe zahlen soll, aber da ich mein eigenes Logfile habe, habe ich ein neues Thema erstellt.
habe wie im anderen Thema die ganzen Anleitungen durch, das heißt mit FRST auf meinem infizierten Rechner einen Scan über Reperaturoptionen durchgeführt, und so sieht die frst.txt aus:
PHP-Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by SYSTEM on MININT-12EV5FC on 09-10-2013 14:21:57
Running from H:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Recovery
The current controlset is ControlSet001
[b]ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.[/b]
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-16] (Synaptics Incorporated)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Monitor] - C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-12] (Intel Corporation)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [318520 2011-01-27] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-06-14] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4851760 2013-09-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-07] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Magic Desktop for HP notification] - C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1238016 2013-07-27] (Easybits)
HKU\André\...\Run: [EADM] - C:\André\Spiele\NFS the Run\Origin\Origin.exe [3551576 2013-10-01] (Electronic Arts)
HKU\André\...\Run: [msnmsgr] - "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
HKU\André\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\André\...\Run: [Google Update] - C:\Users\André\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-05-30] (Google Inc.)
HKU\André\...\Run: [MotoCast] - C:\Program Files (x86)\Motorola Mobility\MotoCast\MotoLauncher.lnk [2047 2013-08-18] ()
Startup: C:\Users\André\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\dlfdwba.lnk
ShortcutTarget: dlfdwba.lnk -> C:\PROGRA~3\abwdfld.plz ()
==================== Services (Whitelisted) =================
S2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-22] (AVG Technologies CZ, s.r.o.)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3538480 2013-09-03] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [301152 2013-09-22] (AVG Technologies CZ, s.r.o.)
S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [344928 2011-01-27] ()
S2 Internet Manager. RunOuc; C:\Program Files (x86)\T-Mobile\InternetManager_H\UpdateDog\ouc.exe [224096 2013-07-08] ()
S2 Motorola Device Manager; C:\Program Files (x86)\Motorola Mobility\Motorola Device Manager\MotoHelperService.exe [137528 2013-07-31] (Motorola Mobility LLC)
S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4687672 2012-05-15] (INCA Internet Co., Ltd.)
S2 Winmgmt; C:\PROGRA~3\dlfdwba.pzz [60512 2013-10-09] (Microsoft Corporation)
S2 Winmgmt; C:\PROGRA~3\dlfdwba.pzz [60512 2013-10-09] (Microsoft Corporation)
S2 ICQ Service; C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE [x]
==================== Drivers (Whitelisted) ====================
S3 ALSysIO; C:\Users\ANDR~1\AppData\Local\Temp\ALSysIO64.sys [25064 2013-10-09] (Arthur Liberman)
S1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
S1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [50296 2012-09-04] (AVG Technologies CZ, s.r.o.)
S1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-09-02] (AVG Technologies CZ, s.r.o.)
S1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-09-02] (AVG Technologies CZ, s.r.o.)
S0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
S0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-08] (AVG Technologies CZ, s.r.o.)
S1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [16512 2013-07-08] (Bytemobile, Inc.)
S1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-03-22] (DT Soft Ltd)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2013-07-08] (Huawei Technologies Co., Ltd.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [17920 2010-06-18] (Siliten)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [43456 2012-07-26] (hxxp://libusb-win32.sourceforge.net)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [77184 2004-03-09] (Protection Technology)
S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [65504 2004-03-09] (Protection Technology)
S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
S1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-07-08] (Bytemobile, Inc.)
S1 tcpipBM; C:\Windows\system32\drivers\tcpipBM.sys [39552 2013-07-08] (Bytemobile, Inc.)
S3 AndNetDiag; system32\DRIVERS\lgandnetdiag64.sys [x]
S3 ANDNetModem; system32\DRIVERS\lgandnetmodem64.sys [x]
S3 andnetndis; system32\DRIVERS\lgandnetndis64.sys [x]
S3 BTCFilterService; system32\DRIVERS\motfilt.sys [x]
S3 motccgp; system32\DRIVERS\motccgp.sys [x]
S3 motccgpfl; system32\DRIVERS\motccgpfl.sys [x]
S3 motmodem; system32\DRIVERS\motmodem.sys [x]
S3 MotoSwitchService; system32\DRIVERS\motswch.sys [x]
S3 Motousbnet; system32\DRIVERS\Motousbnet.sys [x]
S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [x]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [x]
S0 prohlp02; System32\drivers\prohlp02.sys [x]
S0 prosync1; System32\drivers\prosync1.sys [x]
S0 sfhlp01; System32\drivers\sfhlp01.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-09 14:21 - 2013-10-09 14:21 - 00000000 ____D C:\FRST
2013-10-09 03:21 - 2013-10-09 03:56 - 95025368 ____T C:\ProgramData\dlfdwba.pff
2013-10-09 03:21 - 2013-10-09 03:56 - 00000000 _____ C:\ProgramData\dlfdwba.ctrl
2013-10-09 03:21 - 2013-10-09 03:21 - 00114688 _____ C:\ProgramData\abwdfld.plz
2013-10-09 03:21 - 2013-10-09 03:21 - 00060512 ____T (Microsoft Corporation) C:\ProgramData\dlfdwba.pzz
2013-10-09 03:21 - 2013-10-09 03:21 - 00000000 ____D C:\Windows\Sun
2013-10-07 02:56 - 2013-10-07 02:56 - 00001963 _____ C:\Users\Public\Desktop\Ballance.lnk
2013-10-07 02:56 - 2013-10-07 02:56 - 00001963 _____ C:\ProgramData\Desktop\Ballance.lnk
2013-10-07 02:55 - 2013-10-07 02:56 - 00000000 ____D C:\Program Files (x86)\Ballance
2013-10-02 07:37 - 2013-10-02 07:37 - 00000000 ____D C:\Users\André\AppData\Local\LogMeIn
2013-10-02 07:37 - 2013-10-02 07:37 - 00000000 ____D C:\ProgramData\LogMeIn
2013-09-29 01:54 - 2013-09-29 01:54 - 00001847 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2013-09-29 01:54 - 2013-09-29 01:54 - 00001847 _____ C:\ProgramData\Desktop\GeoGebra.lnk
2013-09-29 01:54 - 2013-09-29 01:54 - 00000000 ____D C:\Users\André\AppData\Roaming\GeoGebra 4.4
2013-09-29 01:54 - 2013-09-29 01:54 - 00000000 ____D C:\Program Files (x86)\GeoGebra 4.4
2013-09-29 01:50 - 2013-09-29 01:53 - 41578544 _____ (International GeoGebra Institute) C:\Users\André\Downloads\GeoGebra-Windows-Installer-4-3-31-0.exe
2013-09-28 02:05 - 2013-09-28 02:05 - 00003486 _____ C:\Windows\System32\Tasks\Motorola Device Manager Update
2013-09-28 02:05 - 2013-09-28 02:05 - 00003468 _____ C:\Windows\System32\Tasks\Motorola Device Manager Engine
2013-09-28 02:05 - 2013-09-28 02:05 - 00003294 _____ C:\Windows\System32\Tasks\Motorola Device Manager Initial Update
2013-09-28 02:04 - 2013-09-28 02:04 - 00000000 ____D C:\Program Files\Motorola Inc
2013-09-27 14:11 - 2013-09-27 14:11 - 00000000 ____D C:\Program Files (x86)\SP54024
2013-09-27 14:07 - 2013-09-27 14:08 - 05193912 _____ (Hewlett-Packard Company ) C:\Users\André\Downloads\sp54024.exe
2013-09-27 09:42 - 2013-09-27 09:42 - 00000000 ____D C:\Users\André\AppData\Roaming\AVG2014
2013-09-27 09:40 - 2013-09-27 09:40 - 00000977 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-27 09:40 - 2013-09-27 09:40 - 00000977 _____ C:\ProgramData\Desktop\AVG 2014.lnk
2013-09-27 09:38 - 2013-09-27 09:42 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-27 09:34 - 2013-09-28 00:55 - 00000000 ____D C:\Users\André\AppData\Local\Avg2014
2013-09-20 23:57 - 2013-09-20 23:57 - 00287358 _____ C:\Users\André\Downloads\questhelper-v6.0.2.zip
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\André\Downloads\questhelper-v6.0.2
2013-09-20 06:18 - 2013-09-20 06:18 - 00599568 _____ C:\Users\André\Downloads\model.rar
2013-09-20 06:18 - 2013-09-20 06:18 - 00000000 ____D C:\Users\André\Downloads\model
2013-09-19 05:21 - 2013-09-19 05:22 - 30010384 _____ (TeamSpeak Systems GmbH) C:\Users\André\Downloads\TeamSpeak3-Client-win32-3.0.12.exe
2013-09-12 05:43 - 2013-07-31 06:17 - 17833472 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-09-12 05:43 - 2013-07-31 05:42 - 10926080 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-09-12 05:43 - 2013-07-31 05:29 - 02312704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-09-12 05:43 - 2013-07-31 05:20 - 01346560 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-09-12 05:43 - 2013-07-31 05:19 - 01392128 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-09-12 05:43 - 2013-07-31 05:18 - 01494528 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2013-09-12 05:43 - 2013-07-31 05:17 - 00237056 _____ (Microsoft Corporation) C:\Windows\System32\url.dll
2013-09-12 05:43 - 2013-07-31 05:16 - 00085504 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-09-12 05:43 - 2013-07-31 05:14 - 00173056 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2013-09-12 05:43 - 2013-07-31 05:13 - 00816640 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-09-12 05:43 - 2013-07-31 05:13 - 00599040 _____ (Microsoft Corporation) C:\Windows\System32\vbscript.dll
2013-09-12 05:43 - 2013-07-31 05:11 - 02147840 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-09-12 05:43 - 2013-07-31 05:11 - 00729088 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-09-12 05:43 - 2013-07-31 05:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2013-09-12 05:43 - 2013-07-31 05:08 - 02382848 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-09-12 05:43 - 2013-07-31 05:05 - 00248320 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-09-12 05:43 - 2013-07-31 02:30 - 12335104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-12 05:43 - 2013-07-31 02:05 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-12 05:43 - 2013-07-31 02:00 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-12 05:43 - 2013-07-31 01:53 - 01104896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-12 05:43 - 2013-07-31 01:52 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-09-12 05:43 - 2013-07-31 01:52 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-12 05:43 - 2013-07-31 01:51 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-09-12 05:43 - 2013-07-31 01:49 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-12 05:43 - 2013-07-31 01:48 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-12 05:43 - 2013-07-31 01:48 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-09-12 05:43 - 2013-07-31 01:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-09-12 05:43 - 2013-07-31 01:47 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-12 05:43 - 2013-07-31 01:46 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-12 05:43 - 2013-07-31 01:45 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-12 05:43 - 2013-07-31 01:45 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-09-12 05:43 - 2013-07-31 01:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-12 02:26 - 2013-08-07 17:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2013-09-12 02:26 - 2013-08-04 18:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\ataport.sys
2013-09-12 02:26 - 2013-08-01 18:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2013-09-12 02:26 - 2013-08-01 18:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2013-09-12 02:26 - 2013-08-01 18:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\System32\wow64win.dll
2013-09-12 02:26 - 2013-08-01 18:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\System32\wow64.dll
2013-09-12 02:26 - 2013-08-01 18:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\System32\wow64cpu.dll
2013-09-12 02:26 - 2013-08-01 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\System32\winsrv.dll
2013-09-12 02:26 - 2013-08-01 18:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\System32\ntvdm64.dll
2013-09-12 02:26 - 2013-08-01 18:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\System32\kernel32.dll
2013-09-12 02:26 - 2013-08-01 18:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\System32\KernelBase.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\System32\apisetschema.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 18:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 02:26 - 2013-08-01 17:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 02:26 - 2013-08-01 17:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 02:26 - 2013-08-01 17:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 02:26 - 2013-08-01 17:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 02:26 - 2013-08-01 17:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 17:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\System32\conhost.exe
2013-09-12 02:26 - 2013-08-01 16:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\System32\smss.exe
2013-09-12 02:26 - 2013-08-01 16:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 02:26 - 2013-08-01 16:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 02:26 - 2013-08-01 16:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 02:26 - 2013-08-01 16:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 02:26 - 2013-08-01 16:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 16:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 16:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 02:26 - 2013-08-01 16:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 02:26 - 2013-07-25 18:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2013-09-12 02:26 - 2013-07-25 18:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\System32\shdocvw.dll
2013-09-12 02:26 - 2013-07-25 17:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 02:26 - 2013-07-25 17:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-10 03:40 - 2013-09-10 03:40 - 04215463 _____ C:\Users\André\Downloads\setupautoscreenrecorder31375.exe
2013-09-10 03:40 - 2013-09-10 03:40 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft AutoScreenRecorder 3 Pro
==================== One Month Modified Files and Folders =======
2013-10-09 14:21 - 2013-10-09 14:21 - 00000000 ____D C:\FRST
2013-10-09 03:59 - 2009-07-13 20:45 - 00032064 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-09 03:59 - 2009-07-13 20:45 - 00032064 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-09 03:57 - 2012-08-02 00:55 - 00000000 ____D C:\Users\André\AppData\Roaming\MotoCast
2013-10-09 03:56 - 2013-10-09 03:21 - 95025368 ____T C:\ProgramData\dlfdwba.pff
2013-10-09 03:56 - 2013-10-09 03:21 - 00000000 _____ C:\ProgramData\dlfdwba.ctrl
2013-10-09 03:56 - 2013-08-04 13:02 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-09 03:56 - 2012-08-02 00:59 - 00000000 ____D C:\Users\André\.gstreamer-0.10
2013-10-09 03:52 - 2009-07-13 21:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-09 03:52 - 2009-07-13 20:51 - 00194893 _____ C:\Windows\setupact.log
2013-10-09 03:31 - 2011-12-05 14:09 - 01807021 _____ C:\Windows\WindowsUpdate.log
2013-10-09 03:21 - 2013-10-09 03:21 - 00114688 _____ C:\ProgramData\abwdfld.plz
2013-10-09 03:21 - 2013-10-09 03:21 - 00060512 ____T (Microsoft Corporation) C:\ProgramData\dlfdwba.pzz
2013-10-09 03:21 - 2013-10-09 03:21 - 00000000 ____D C:\Windows\Sun
2013-10-09 03:14 - 2012-05-30 01:26 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3055925560-2104778183-246893781-1000UA.job
2013-10-09 03:13 - 2013-08-04 13:02 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-09 03:11 - 2013-03-30 01:13 - 00000000 ____D C:\ProgramData\MFAData
2013-10-09 03:10 - 2012-05-30 04:10 - 00000000 ____D C:\Users\André\AppData\Roaming\Might & Magic Heroes VI
2013-10-09 02:49 - 2012-08-30 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-08 11:08 - 2013-08-04 13:02 - 00004104 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-08 11:08 - 2013-08-04 13:02 - 00003852 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 08:57 - 2012-05-30 23:27 - 00000000 ____D C:\Users\André\AppData\Local\CrashDumps
2013-10-08 05:57 - 2012-05-30 01:13 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A872087D-1388-4A5A-9EA3-C91E7C039A32}
2013-10-07 04:14 - 2012-05-30 01:26 - 00001068 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3055925560-2104778183-246893781-1000Core.job
2013-10-07 02:56 - 2013-10-07 02:56 - 00001963 _____ C:\Users\Public\Desktop\Ballance.lnk
2013-10-07 02:56 - 2013-10-07 02:56 - 00001963 _____ C:\ProgramData\Desktop\Ballance.lnk
2013-10-07 02:56 - 2013-10-07 02:55 - 00000000 ____D C:\Program Files (x86)\Ballance
2013-10-07 02:55 - 2011-09-01 15:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-06 07:57 - 2012-05-30 11:31 - 00001894 _____ C:\Users\André\Desktop\Might & Magic Heroes VI - Verknüpfung.lnk
2013-10-06 07:55 - 2009-07-13 21:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-02 08:49 - 2013-02-08 12:08 - 00000858 _____ C:\Windows\client.config.ini
2013-10-02 08:27 - 2010-11-20 19:47 - 00384648 _____ C:\Windows\PFRO.log
2013-10-02 07:37 - 2013-10-02 07:37 - 00000000 ____D C:\Users\André\AppData\Local\LogMeIn
2013-10-02 07:37 - 2013-10-02 07:37 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-02 07:36 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\Help
2013-09-29 01:54 - 2013-09-29 01:54 - 00001847 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2013-09-29 01:54 - 2013-09-29 01:54 - 00001847 _____ C:\ProgramData\Desktop\GeoGebra.lnk
2013-09-29 01:54 - 2013-09-29 01:54 - 00000000 ____D C:\Users\André\AppData\Roaming\GeoGebra 4.4
2013-09-29 01:54 - 2013-09-29 01:54 - 00000000 ____D C:\Program Files (x86)\GeoGebra 4.4
2013-09-29 01:53 - 2013-09-29 01:50 - 41578544 _____ (International GeoGebra Institute) C:\Users\André\Downloads\GeoGebra-Windows-Installer-4-3-31-0.exe
2013-09-28 02:05 - 2013-09-28 02:05 - 00003486 _____ C:\Windows\System32\Tasks\Motorola Device Manager Update
2013-09-28 02:05 - 2013-09-28 02:05 - 00003468 _____ C:\Windows\System32\Tasks\Motorola Device Manager Engine
2013-09-28 02:05 - 2013-09-28 02:05 - 00003294 _____ C:\Windows\System32\Tasks\Motorola Device Manager Initial Update
2013-09-28 02:05 - 2012-08-02 00:57 - 00000000 ____D C:\Program Files (x86)\Motorola Mobility
2013-09-28 02:04 - 2013-09-28 02:04 - 00000000 ____D C:\Program Files\Motorola Inc
2013-09-28 01:22 - 2012-11-23 08:21 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForAndré
2013-09-28 01:22 - 2012-11-23 08:21 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForAndré.job
2013-09-28 00:55 - 2013-09-27 09:34 - 00000000 ____D C:\Users\André\AppData\Local\Avg2014
2013-09-27 14:11 - 2013-09-27 14:11 - 00000000 ____D C:\Program Files (x86)\SP54024
2013-09-27 14:08 - 2013-09-27 14:07 - 05193912 _____ (Hewlett-Packard Company ) C:\Users\André\Downloads\sp54024.exe
2013-09-27 13:53 - 2013-03-30 01:15 - 00000000 ____D C:\ProgramData\AVG2013
2013-09-27 09:42 - 2013-09-27 09:42 - 00000000 ____D C:\Users\André\AppData\Roaming\AVG2014
2013-09-27 09:42 - 2013-09-27 09:38 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-27 09:42 - 2013-03-30 01:15 - 00000000 ___HD C:\$AVG
2013-09-27 09:42 - 2013-03-30 01:14 - 00000000 ____D C:\Program Files (x86)\AVG
2013-09-27 09:40 - 2013-09-27 09:40 - 00000977 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2013-09-27 09:40 - 2013-09-27 09:40 - 00000977 _____ C:\ProgramData\Desktop\AVG 2014.lnk
2013-09-21 03:26 - 2011-09-02 00:43 - 00657910 _____ C:\Windows\System32\perfh007.dat
2013-09-21 03:26 - 2011-09-02 00:43 - 00131250 _____ C:\Windows\System32\perfc007.dat
2013-09-21 03:26 - 2009-07-13 21:13 - 01507342 _____ C:\Windows\System32\PerfStringBackup.INI
2013-09-20 23:57 - 2013-09-20 23:57 - 00287358 _____ C:\Users\André\Downloads\questhelper-v6.0.2.zip
2013-09-20 23:57 - 2013-09-20 23:57 - 00000000 ____D C:\Users\André\Downloads\questhelper-v6.0.2
2013-09-20 06:18 - 2013-09-20 06:18 - 00599568 _____ C:\Users\André\Downloads\model.rar
2013-09-20 06:18 - 2013-09-20 06:18 - 00000000 ____D C:\Users\André\Downloads\model
2013-09-20 04:49 - 2012-08-30 13:15 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-20 04:49 - 2012-08-30 13:15 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-20 04:49 - 2012-08-30 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 05:22 - 2013-09-19 05:21 - 30010384 _____ (TeamSpeak Systems GmbH) C:\Users\André\Downloads\TeamSpeak3-Client-win32-3.0.12.exe
2013-09-19 05:22 - 2013-03-13 12:53 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2013-09-17 10:17 - 2013-02-08 10:11 - 00000000 ___HD C:\Users\André\Documents\Runes of Magic
2013-09-14 23:21 - 2012-05-31 14:19 - 00000000 ____D C:\Windows\System32\Tasks\Games
2013-09-12 11:02 - 2009-07-13 19:20 - 00000000 ____D C:\Windows\rescache
2013-09-12 07:52 - 2009-07-13 20:45 - 00418808 _____ C:\Windows\System32\FNTCACHE.DAT
2013-09-12 05:47 - 2013-07-15 05:28 - 00000000 ____D C:\Windows\System32\MRT
2013-09-12 05:45 - 2012-06-12 06:34 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-12 05:45 - 2012-06-01 23:25 - 79143768 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-09-10 03:40 - 2013-09-10 03:40 - 04215463 _____ C:\Users\André\Downloads\setupautoscreenrecorder31375.exe
2013-09-10 03:40 - 2013-09-10 03:40 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft AutoScreenRecorder 3 Pro
Files to move or delete:
====================
C:\ProgramData\abwdfld.plz
C:\ProgramData\dlfdwba.ctrl
C:\ProgramData\dlfdwba.pff
Some content of TEMP:
====================
C:\Users\André\AppData\Local\Temp\AutoRun.exe
C:\Users\André\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\André\AppData\Local\Temp\catalyst_mobility_64-bit_util.exe
C:\Users\André\AppData\Local\Temp\CH.dll
C:\Users\André\AppData\Local\Temp\comver.dll
C:\Users\André\AppData\Local\Temp\eauninstall.exe
C:\Users\André\AppData\Local\Temp\FIFA 2005_uninst.exe
C:\Users\André\AppData\Local\Temp\jna3281351661723657235.dll
C:\Users\André\AppData\Local\Temp\jna4770932304411085280.dll
C:\Users\André\AppData\Local\Temp\jna4814522010958433371.dll
C:\Users\André\AppData\Local\Temp\jna6169265754507569653.dll
C:\Users\André\AppData\Local\Temp\jna6912594321685417377.dll
C:\Users\André\AppData\Local\Temp\jna7028951366591350982.dll
C:\Users\André\AppData\Local\Temp\jna7827818610631047807.dll
C:\Users\André\AppData\Local\Temp\MotorolaDeviceManager_2.0309.exe
C:\Users\André\AppData\Local\Temp\MotorolaDeviceManager_2.0403.exe
C:\Users\André\AppData\Local\Temp\RDtemp.exe
C:\Users\André\AppData\Local\Temp\sqlite-3.6.20-sqlitejdbc.dll
C:\Users\André\AppData\Local\Temp\{C10FF7FE-0755-4ABD-ACC5-9B26C365A432}-27.0.1453.110_27.0.1453.94_chrome_updater.exe
C:\Users\André\AppData\Local\Temp\~tmf8572745841485462304.dll
==================== Known DLLs (Whitelisted) ================
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== EXE ASSOCIATION =====================
HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK
==================== Restore Points =========================
8
Restore point made on: 2013-09-26 09:03:24
Restore point made on: 2013-09-27 09:38:33
Restore point made on: 2013-09-27 09:38:59
Restore point made on: 2013-09-28 02:03:38
Restore point made on: 2013-10-02 07:35:15
Restore point made on: 2013-10-02 07:36:27
Restore point made on: 2013-10-02 07:37:04
Restore point made on: 2013-10-07 02:55:50
==================== Memory info ===========================
Percentage of memory in use: 14%
Total physical RAM: 6091.86 MB
Available physical RAM: 5224.2 MB
Total Pagefile: 6090.01 MB
Available Pagefile: 5220.46 MB
Total Virtual: 8192 MB
Available Virtual: 8191.88 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:447.59 GB) (Free:266.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (RECOVERY) (Fixed) (Total:17.87 GB) (Free:1.89 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
Drive h: (Intenso) (Removable) (Total:29.87 GB) (Free:29.86 GB) FAT32
Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FA5300E9)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=448 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=18 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=103 MB) - (Type=0C)
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 30 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=30 GB) - (Type=0C)
LastRegBack: 2013-10-06 04:56
==================== End Of Log ============================
Vielen Dank im Vorraus!
09.10.2013, 13:33
Baum-Darstellung